Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.cer
File:                     C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.cer (raw, json)
Hash identifier:          PSYaL/B/rRT4SqxajqEZ7/e+zyg1+0dRKRS6jpg5rnw=
Subject key identifier:   C2:F9:AB:D6:D8:F3:9D:CF:E5:96:9B:42:8D:EA:36:15:CA:D4:E5:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17155E153096DCBB5809C7E6E5C891A85EF43EAD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 20:01:31 +0000
Certificate not after:    Mon 16 Dec 2024 20:06:31 +0000
Subordinate resources:    AS: 265986
                          IP: 181.191.32.0/22
                          IP: 2804:40dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:15:5e:15:30:96:dc:bb:58:09:c7:e6:e5:c8:91:a8:5e:f4:3e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 20:01:31 2023 GMT
            Not After : Dec 16 20:06:31 2024 GMT
        Subject: CN=C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:12:83:4f:2a:89:fd:2b:0e:8a:cb:9e:c4:19:
                    6a:45:74:78:aa:c3:6b:f9:77:37:f3:50:9e:c3:2e:
                    f1:cf:c0:08:5d:fa:44:ab:97:ca:7f:fa:1d:ac:e7:
                    35:39:1e:72:50:76:ce:07:53:78:a6:0d:c9:e8:2c:
                    89:ee:f0:fa:25:f5:4a:e2:79:bb:1d:4f:13:35:4b:
                    68:c4:04:c1:f6:ac:1e:89:2d:b3:7e:ca:b5:00:56:
                    87:c3:ee:1b:95:91:41:ca:14:75:49:f9:10:59:09:
                    11:e5:44:93:a4:98:39:32:cf:07:31:06:4c:98:09:
                    14:fe:c2:5b:a5:a8:d3:17:57:54:8c:eb:75:88:1f:
                    87:95:e3:35:26:ae:c7:90:ae:df:2e:87:57:87:77:
                    e8:20:ee:09:b9:94:fb:c7:38:7b:e2:8d:a7:d7:b5:
                    9a:c6:b9:5c:c4:ce:04:38:7c:41:e3:36:5e:cf:26:
                    40:45:c6:2d:49:bb:4a:04:b5:3d:72:b8:b7:5c:b1:
                    8a:ba:c2:b6:cd:99:4e:3d:01:f7:5a:ad:30:c1:a8:
                    a6:7b:55:66:20:a0:65:4d:7e:df:82:fb:56:a2:f6:
                    92:0b:4f:88:75:98:42:3c:82:03:b8:c0:15:61:bf:
                    fd:57:fb:d2:a4:73:7a:45:60:0f:49:20:6c:b2:f9:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:F9:AB:D6:D8:F3:9D:CF:E5:96:9B:42:8D:EA:36:15:CA:D4:E5:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/C2F9ABD6D8F39DCFE5969B428DEA3615CAD4E5F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.32.0/22
                IPv6:
                  2804:40dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265986

    Signature Algorithm: sha256WithRSAEncryption
         58:d8:68:58:fd:4f:8a:69:1d:79:63:42:0c:37:5d:7f:a2:d2:
         58:56:39:34:d4:a2:15:f9:cc:23:39:39:08:7e:80:9d:61:43:
         09:2c:2f:67:4b:d5:5b:3f:81:c1:3f:97:c0:7b:40:b0:cc:fa:
         be:01:f3:f4:f7:db:57:33:3b:a4:27:73:e7:de:29:33:45:f2:
         9d:64:73:29:18:5b:e7:f1:26:6f:50:94:4c:92:0a:53:8b:8c:
         d0:6d:31:69:74:86:c4:12:79:49:df:99:97:7b:38:80:de:80:
         6e:9b:2e:09:d2:24:f9:df:be:e1:47:f0:4a:79:d0:5d:5f:2f:
         bf:d2:7f:0f:29:98:4a:81:74:97:e7:93:d9:a2:37:07:1b:87:
         f1:53:e9:79:76:08:59:e5:d9:a3:c5:bc:ad:47:74:74:c8:9a:
         0e:55:55:1c:44:31:53:b7:92:35:a5:5a:62:de:3d:57:79:f2:
         65:6d:06:c2:9e:57:8f:78:9c:cf:04:e2:f8:ef:4d:d1:bc:dd:
         56:67:90:f0:f7:e5:3b:59:56:6e:55:1d:b8:46:1a:a7:88:7e:
         bb:86:3a:da:11:90:dd:97:89:81:76:ad:c6:88:8d:33:f7:26:
         b3:f4:47:87:86:ab:06:5c:54:dd:a4:7a:3c:48:21:df:9c:49:
         3e:65:4c:d8
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUFxVeFTCW3LtYCcfm5ciRqF70Pq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMTgyMDAxMzFaFw0yNDEyMTYyMDA2MzFaMDMxMTAvBgNV
BAMTKEMyRjlBQkQ2RDhGMzlEQ0ZFNTk2OUI0MjhERUEzNjE1Q0FENEU1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOEoNPKon9Kw6Ky57EGWpFdHiq
w2v5dzfzUJ7DLvHPwAhd+kSrl8p/+h2s5zU5HnJQds4HU3imDcnoLInu8Pol9Uri
ebsdTxM1S2jEBMH2rB6JLbN+yrUAVofD7huVkUHKFHVJ+RBZCRHlRJOkmDkyzwcx
BkyYCRT+wlulqNMXV1SM63WIH4eV4zUmrseQrt8uh1eHd+gg7gm5lPvHOHvijafX
tZrGuVzEzgQ4fEHjNl7PJkBFxi1Ju0oEtT1yuLdcsYq6wrbNmU49AfdarTDBqKZ7
VWYgoGVNft+C+1ai9pILT4h1mEI8ggO4wBVhv/1X+9Kkc3pFYA9JIGyy+UlxAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTC+avW2POdz+WW
m0KN6jYVytTl+TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FaTRUVWg2eWZxNXdwWkJhRHFFaFNkeDlNa2RuSEhhdm1W
OFR4d1I3NTluUi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRWk0VFVoNnlmcTV3cFpCYURxRWhTZHg5TWtkbkhIYXZt
VjhUeHdSNzU5blIvMC9DMkY5QUJENkQ4RjM5RENGRTU5NjlCNDI4REVBMzYxNUNB
RDRFNUY5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK1vyAwDQQCAAIwBwMF
ACgEQNwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA8CMA0GCSqGSIb3DQEBCwUA
A4IBAQBY2GhY/U+KaR15Y0IMN11/otJYVjk01KIV+cwjOTkIfoCdYUMJLC9nS9Vb
P4HBP5fAe0CwzPq+AfP099tXMzukJ3Pn3ikzRfKdZHMpGFvn8SZvUJRMkgpTi4zQ
bTFpdIbEEnlJ35mXeziA3oBumy4J0iT5377hR/BKedBdXy+/0n8PKZhKgXSX55PZ
ojcHG4fxU+l5dghZ5dmjxbytR3R0yJoOVVUcRDFTt5I1pVpi3j1XefJlbQbCnleP
eJzPBOL4703RvN1WZ5Dw9+U7WVZuVR24RhqniH67hjraEZDdl4mBdq3GiI0z9yaz
9EeHhqsGXFTdpHo8SCHfnEk+ZUzY
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org